Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/donknap/dpanel

3 known vulnerabilities (1 critical, 1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 critical, 1 high, 1 medium
Registry
pkg.go.dev

Advisories 3

  • DPanel has an arbitrary file deletion vulnerability in /api/common/attach/delete interface

    Affected: fixed in 1.9.2.

  • CVE-2025-53363Medium 4.8

    Dpanel has an arbitrary file read vulnerability

    Affected: from 1.2.0; from 1.2.0, through 1.7.2.

  • CVE-2025-30206Critical 9.8

    Dpanel's hard-coded JWT secret leads to remote code execution

    Affected: fixed in 1.6.1.